Cerber – Page 3 – Computer Security Articles

Ransomware: a declining nuisance or an evolving menace?

February 14, 2017 admin Antimalware research for IT pros and enthusiasts, Cerber, CornCrypt, Critorni, Dereilock, Donoff, exploit kit, Locky, Meadgive, Microsoft Edge, Microsoft SmartScreen, Nemucod, Neutrino, ransomware, Samas, spam, spora, Telecrypt, Troldesh, Windows 10, Windows 10 Creators Update, Windows Defender, Windows Defender ATP, Zcryptor

Credit to Author: msft-mmpc| Date: Tue, 14 Feb 2017 21:56:15 +0000

The volume of ransomware encounters is on a downward trend. Are we seeing the beginning of the end of this vicious threat? Unfortunately, a look at the attack vectors, the number of unique families released into the wild, and the improvements in malware code reveals otherwise. Ransomware was arguably the biggest security story of 2016….

Microsoft Security

Been shopping lately? Fake credit card email can spook you into downloading Cerber ransomware

January 23, 2017 admin Antimalware research for IT pros and enthusiasts, AppLocker Group Policy, Cerber, Device Guard, macro malware, Macro-based malware, malware, malware research, MMPC, ransomware, Social engineering, spam, Windows Defender

As the shopping sprees become increasingly frenetic during holiday season, it’s hard not to worry about how much credit card debt we’re piling. Some of us rely on email notifications from our banks to track the damage to our finances. So what happens when we suddenly get notified about charges for things we never bought?…

Microsoft Security

No slowdown in Cerber ransomware activity as 2016 draws to a close

January 23, 2017 admin Antimalware research for IT pros and enthusiasts, Cerber, Donoff, Exploits, holiday shopping, macro, Macro-based malware, Meadgive, ransomware, spam, Windows 10, Windows Defender, Windows Defender ATP

As everybody else winds down for the holidays, the cybercriminals behind Cerber are busy ramping up their operations. Following our discovery of a spam campaign that takes advantage of holiday shopping, we found two new campaigns that continue distributing the latest variants of Cerber ransomware. These campaigns are the latest in a series of persistent cybercriminal…

Microsoft Security

MSRT July 2016 – Cerber ransomware

January 23, 2017 admin Antimalware research for IT pros and enthusiasts, Cerber, Cerber infection chain, Exxroute, Locky, Microsoft Malicious Software Removal Tool, MSRT, ransomware, ransomware detection, ransomware mitigation, ransomware recovery

As part of our ongoing effort to provide better malware protection, the July 2016 release of the Microsoft Malicious Software Removal Tool (MSRT) includes detection for Win32/Cerber, a prevalent ransomware family. The inclusion in MSRT complements our Cerber-specific family detections in Windows Defender, and our ransomware-dedicated cloud protection features. We started seeing Cerber in February…

Microsoft Security

Where’s the Macro? Malware authors are now using OLE embedding to deliver malicious files

January 23, 2017 admin Antimalware research for IT pros and enthusiasts, CAPTCHA, Cerber, Donvibs, macro malware, Macro-based malware, malicious JS scripts, malicious VB files, Microsoft Office, office, OLE-embedded objects, ransomware, TrojanDownloader:VBS/Donvibs, TrojanDownloader:VBS/Vibrio, Vibrio

Recently, we’ve seen reports of malicious files that misuse the legitimate Office object linking and embedding (OLE) capability to trick users into enabling and downloading malicious content. Previously, we’ve seen macros used in a similar matter, and this use of OLE might indicate a shift in behavior as administrators and enterprises are mitigating against this…